tpm2_quote(1) General Commands Manual tpm2_quote(1) (NAME) tpm2_quote - (quote) TPM (SYNOPSIS) tpm2_quote [OPTIONS] (DESCRIPTION) tpm2_quote(1) - PCR / . (OPTIONS) o -c, --key-context=OBJECT: (context object) . o -p, --auth=AUTH: (authorization) AK -C . o -l, --pcr-list=PCR: PCR PCR . NOTES . o -m, --message=FILE: TPM . o -s, --signature=FILE: -f . o -f, --format=FORMAT: . o -o, --pcr=FILE. PCR PCR -l . o -F, --pcrs_format=FORMAT: (binary blob) PCR. "values" PCR . "serialized" PCR little endian . "marshaled" TSS2 . marshaled : TPML_PCR_SELECTION UINT32 ( TPML_DIGEST ) TPML_DIGEST [ TPML_DIGEST]. . "serialized" . o -q, --qualification=HEX_STRING_OR_PATH: . (nonce) (replay attacks) . o -g, --hash-algorithm: () . sha256 . o --scheme=ALGORITHM: . . " " "Algorithm Specifiers" . "Supported Signing Schemes" . . . o --cphash=FILE . cpHash . : cpHash . (Context Object Format) (handle) : o (transient) TPM . o : o owner: (owner hierarchy) o platform: (platform hierarchy) o endorsement: (endorsement hierarchy) o lockout: (lockout control persistent object) o handle ( 0x81010013) . (Authorization Formatting) TPM2.0 : . Password . HMAC . Sessions : " (EMPTY PASSWORD) ". auth HMAC . . . HMAC (: tpm2_startauthsession(1)). (Passwords) . : . (String) "str:" ( ) . (Examples) foobar str:foobar (Hex-string) "hex:" / . (Example) hex:1122334455667788 (File) "file:" "-" stdin . . (Examples) # to use stdin and be prompted file:- # to use a file from a path file:path/to/password/file # to echo a password via stdin: echo foobar | tpm2_tool -p file:- # to use a bash here-string via stdin: tpm2_tool -p file:- <<< foobar session . tpm2_startauthsession(1) . (auth value) ( policy password) + (Passwords) . (Examples) session.ctx: session:session.ctx session.ctx authvalue mypassword: session:session.ctx+mypassword session.ctx authvalue HEX 0x11223344: session:session.ctx+hex:11223344 (PCR Authorizations) PCR "pcr:" PCR . PCR : = PCR " PCR" . raw-pcr-file PCR tpm2_pcrread(1) . PCR (Examples) PCR sha256 0 1 2 3 : pcr:sha256:0,1,2,3 AUTH. (Signature Format Specifiers) . tss () (binary blob) TPM 2.0 . plain . FORMAT . (PCR Bank Specifiers) PCR : :[,] or :all `+' . : sha1:3,4+sha256:all PCR 3 4 SHA1 PCR 0 23 SHA256 . (forward sealing) : sha1:0,1=da39a3ee5e6b4b0d3255bfef95601890afd80709,2 PCR 0 2 PCR 1 . (Digest) . 0x ..SS (Note) PCR ( PCR Selections) PCR . TPM PCR . (COMMON OPTIONS) . o -h, --help=[man|no-man]: (manpage) . man . "man" "man" man stderr . "no-man" manpager stdout . MANPATH man(1) . o -v, --version: TCTI . o -V, --verbose: . . o -Q, --quiet: stdout. o -Z, --enable-errata: (errata fixups). TPM . TPM2TOOLS_ENABLE_ERRATA . o -z, --pwd-session: HMAC . (clear text) TPM . (unsalted) OpenSSL FIPS . auth (salted) . o -R, --autoflush: (autoflush) (transient objects) . (context file) (flush) . TPM2TOOLS_AUTOFLUSH yes true . . TCTI (TCTI Configuration) TCTI " " (Transmission Interface) TPM . TCTI TPM . TCTI : 1. -T --tcti 2. : TPM2TOOLS_TCTI. : . TCTI : o tabrmd - tabrmd . tabrmd abrmd tcti . o mssim - TPM . o device - TPM . o none - TPM . off-tpm TCTI . TCTI . "none" . : : ..SS " TCTI (TCTI Defaults)" TCTI TCTI dlopen(3) . TCTI tabrmd device mssim . -v TCTI . - "default-tcti" TCTI . TCTI (Custom TCTIs) TCTI TCTI . dlopen(3) tcti-name . dlopen(3) . TCTI (TCTI OPTIONS) TCTI : o device: device TCTI TPM device TCTI . /dev/tpm0 . : -T device:/dev/tpm0 export TPM2TOOLS_TCTI="device:/dev/tpm0" o mssim: mssim TCTI IP . 127.0.0.1 2321 . : -T mssim:host=localhost,port=2321 export TPM2TOOLS_TCTI="mssim:host=localhost,port=2321" o abrmd: abrmd TCTI - `,' . `=' . o abrmd TCTI : 1. `bus_name' : tabrmd ( ). 2. `bus_type' : dbus ( ) `session' `system' . tabrmd tcti bus_name=com.example.FooBar: \--tcti=tabrmd:bus_name=com.example.FooBar tcti (abrmd) bus_type=session: \--tcti:bus_type=session : abrmd tabrmd . TCTI. (EXAMPLES) tpm2_createprimary -C e -c primary.ctx tpm2_create -C primary.ctx -u key.pub -r key.priv tpm2_load -C primary.ctx -u key.pub -r key.priv -c key.ctx tpm2_quote -Q -c key.ctx -l 0x0004:16,17,18+0x000b:16,17,18 PCR (quote) . TPM 24 PCR (quote) . (detached signature) . (EXIT STATUS) : o 0 - . o 1 - . o 2 - . o 3 - . o 4 - TCTI. o 5 - (scheme) . tpm2_testparams. (BUGS) (Github Issues) (HELP) (Mailing List) . (LICENSE) 4.0 (CC BY 4.0) . tpm2-tools tpm2_quote(1)